Windows Server 2008 Group Policy deployment IPSec server and Domain Isolation (3)

To configure a subordinate CA on a network policy server

A subordinate CA must be configured to issue certificates automatically when a NAP client that meets NAP policy requirements sends a certificate request. By default, a stand-alone CA must be approved by the Administrator prior to issuing a certificate, and we do not want to waste time waiting for admin approval, so we configure the machine to automatically issue certificates when a separate CA is issued when the request is made.

Perform the following steps on the WIN2008SRV1:

1, on the WIN2008SRV1, click Start, then click Run, enter Certsrv.msc, and then press ENTER;

2, in the Certification Authority console tree, right click Msfirewall-win2008srv1-ca, and then click on the properties;

Figure 28

3, click the Policy module option, and then click Properties;

Figure 29